Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56803142-e093-398c-b98d-045431738fe3.roa
File:                     56803142-e093-398c-b98d-045431738fe3.roa (raw, json)
Hash identifier:          /3GM8yyDIxxZcz8CyvZaNmozdQdpHcwUOYRqpRY9L6Q=
Subject key identifier:   CA:99:00:1F:57:70:F7:80:48:80:56:46:6D:FD:34:29:F8:7A:2A:0D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584756460B59AFC377A551EC2F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56803142-e093-398c-b98d-045431738fe3.roa
Signing time:             Thu 26 Sep 2024 01:00:31 +0000
ROA not before:           Thu 26 Sep 2024 01:00:31 +0000
ROA not after:            Wed 25 Dec 2024 02:00:31 +0000
asID:                     20940
IP address blocks:        184.85.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:56:46:0b:59:af:c3:77:a5:51:ec:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 26 01:00:31 2024 GMT
            Not After : Dec 25 02:00:31 2024 GMT
        Subject: CN=42c5103c-4ed0-4e53-af6c-08ee6f3ed7a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:58:0a:07:5c:e7:26:61:a1:fd:b5:f4:7b:d5:
                    98:e9:53:79:34:7b:57:85:6c:88:13:c8:2c:c0:84:
                    fc:23:70:03:25:e6:22:07:90:3f:d7:9d:ff:dd:53:
                    43:32:60:57:3e:44:79:28:8b:ae:59:e3:66:b4:3e:
                    5c:e5:cb:03:cf:9a:06:92:21:a9:d0:3e:77:91:0b:
                    f6:ab:7c:8c:de:be:ea:97:4f:f5:1a:00:a0:c1:39:
                    ab:c0:95:61:6c:9e:e3:e4:1f:19:0c:f8:08:7a:18:
                    8a:1b:36:1d:e1:9a:17:64:60:0a:78:b0:f0:e7:e3:
                    ad:c0:94:02:49:24:3e:8a:2b:09:ae:04:ed:49:d4:
                    36:6a:e2:1c:0b:ef:6c:2a:a5:4c:83:02:df:76:0b:
                    8e:5f:8b:2b:20:2e:96:06:f9:b8:a8:5a:61:72:13:
                    b9:fa:44:ff:9c:f9:12:a7:bd:80:8f:66:43:75:1c:
                    9c:85:d4:39:74:9f:ee:68:cf:bc:b5:9e:ca:8a:7c:
                    e6:ff:e2:d9:e0:8a:05:d2:54:a8:c4:05:8f:6e:4b:
                    d3:58:ae:f4:1c:b5:bb:f0:1a:40:5d:a6:74:a6:22:
                    96:ce:df:66:ce:3f:98:db:ca:bb:3a:ba:61:16:e6:
                    03:d1:e3:de:f4:39:05:ee:6c:89:04:52:8c:d9:b3:
                    3a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:99:00:1F:57:70:F7:80:48:80:56:46:6D:FD:34:29:F8:7A:2A:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56803142-e093-398c-b98d-045431738fe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.85.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:1b:7b:60:4d:79:58:99:0c:48:96:d0:e5:03:a8:30:a9:e8:
         73:32:11:0e:6e:f0:24:53:00:d3:8d:26:2e:0c:db:58:f5:70:
         a5:fb:94:34:a6:ea:0e:bd:92:a3:89:45:c8:ef:c1:97:93:3a:
         b9:58:46:2d:0a:d3:b8:fa:5c:cf:f6:03:a9:e1:c7:16:b9:57:
         f3:3f:b0:a3:5a:47:fd:19:14:38:73:a3:03:65:fc:b7:ea:e8:
         f0:3a:06:fb:c4:46:f9:b8:81:82:0c:08:8b:12:02:a9:b7:e0:
         23:e1:3b:c2:47:86:eb:9e:79:0f:97:da:0a:3c:d7:23:cd:a5:
         db:48:05:b9:0f:6d:eb:4b:73:26:68:53:01:b0:24:75:74:7f:
         bf:06:09:b2:cf:43:89:ac:30:be:10:0a:f6:e9:52:08:bb:3f:
         ba:9f:5e:53:f7:3c:ab:f9:c5:4d:5a:8e:fc:de:3b:54:d2:c0:
         33:f0:62:24:46:cb:fa:10:77:25:b7:bf:26:bf:da:b0:89:c2:
         f0:14:fb:32:7c:dc:6f:0f:62:62:fa:a6:ae:2f:e7:ef:cd:ba:
         3f:f4:45:f8:b5:24:86:b1:d7:7f:a5:fa:e0:45:f0:0b:8b:fd:
         b7:10:13:94:3c:ec:6e:9d:2c:eb:7e:d0:9a:a6:b2:fe:55:80:
         85:09:e4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:49 2024 by rpki-client on console-fra.rpki-client.org